[runjake]

Occasionally, but not often. BUT in no case do they need to use the CLI to do that. When they do need to, they allow the app in System Settings app, under Privacy & Security.

Heck, I am a "power user" who installs all kinds of weird apps and I haven't had to do that, except in my hackintosh days when modifying the system.

Here is the related Apple support article: https://support.apple.com/en-us/102445

[righthand]

Yes but you admit they dont need to do that but they can and probably have. That’s the simple point I’m making between restricted and non restricted devices. You may see them as guard rails or whatever but they’re still restrictions.

As soon as you let macports through Gatekeeper you are breaking through device restrictions. Does macports/homebrew have a UI?? They might not need to use the CLI to do that but they might still use it. Heck their AI assistant even might.

Another example my company doesn’t allow me to adjust OSX notification settings. Another restriction making my device use restricted.